Package net.shibboleth.oidc.jwt.claims

Interface ClaimsValidator

All Superinterfaces:

Component, IdentifiableComponent, IdentifiedComponent

All Known Implementing Classes:

AbstractClaimsValidator, AccessTokenHashValidator, ACRClaimsValidator, AudienceClaimsValidator, AuthenticationAudienceClaimsValidator, AuthenticationTimeClaimsValidator, ChainingJWTClaimsValidator, ExactMatchClaimsValidator, ExpiryClaimsValidator, FunctionClaimsValidator, IssuedAtClaimsValidator, JWTIdentifierClaimsValidator, JWTIdentifierRevocationValidator, NotBeforeClaimsValidator, ProhibitedClaimsValidator, RequiredClaimsValidator

@ThreadSafe
@Immutable
public interface ClaimsValidator
extends IdentifiableComponent

High-level API for validating a JWT's claims set.

Instances of this interface must be stateless.

Method Summary

Modifier and Type	Method	Description
void	validate(JWTClaimsSet claims, ProfileRequestContext context)	Validate all, or part of, the given JWT claims set.

Methods inherited from interface net.shibboleth.shared.component.IdentifiableComponent

setId

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Method Details

validate

void validate(@Nonnull
 JWTClaimsSet claims,
 @Nonnull
 ProfileRequestContext context)
       throws JWTValidationException

Validate all, or part of, the given JWT claims set. Can take supporting information from the given context tree.

Throws an exception if validation fails.

Parameters:

claims - the claims to validate.

context - the profile request context.

Throws:

JWTValidationException - when validation is unsuccessful due to a failed attempt